General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 241 Views
  • 0 replies
  • 0 Likes

Resolved! Malicious file not getting blocked

 

Hello,

 

An email attachment has been classified by Wildfire as malicious. However, it was not blocked and just an alert was logged.

Below are two screenshots from the Wildfire submission and threat logs.


Any idea why has the Vulnerability Protection cl

...

Log.jpg
Wildfire.jpg
Farzana by L4 Transporter
  • 2119 Views
  • 2 replies
  • 0 Likes

Resolved! Package Fetch/Repository Problem

Taken from the install guide, but is this still the correct repostitory:

:~$ sudo add-apt-repository "deb http://minemeld-updates.panw.io/ubuntu trusty-minemeld main"

:~$ sudo apt-get update

Hit http://security.debian.org wheezy/updates Release.gpg
Hi

...

Altering Cloned Template Changes Original?

I've been working with one of my customers on enhancing security across their firewall deployment.

 

After creating a template in Panorama including management hardening and protocol hardening configurations, they cloned the template so they could appl

...

Minemeld administrator rights

Hello,

 

I found how to add a new administrator. But I want this new administrator to get only read access on everything and write access on a miner - in order to add indicators (IPv4 and URL) on it.

 

Do you know if it is possible ? and how ?

 

 

 

GVN2022 by L0 Member
  • 5009 Views
  • 2 replies
  • 0 Likes

SSL Decryption

Hello,

 

I have a PA-VM running on a ESX server.

I want to set up SSL Decryption on it using a SUBCA certificate chain signed by a PKI (windows server).

I check boxes "Forward to trust/untrusted certifcate"

I export the SUBCA to store it on a client machi

...

Incorrect GeoIP location

Hi,
 
It came to my attention that our IP address: 94.23.154.203 according to paloalto geo database appears as it is located in Russian Federation, whereas RIPE and ARIN, NIC, maxmind and others state correctly it is a United Kingdom based IP address.
T
...

pablo77 by L1 Bithead
  • 7219 Views
  • 8 replies
  • 0 Likes

Resolved! IPSec VPN Tunnel - Tunnel interface IP address use?

Hi folks,

 

I am being asked to setup a new IPSec VPN Tunnel and one of the questions from their "worksheet" is what our Tunnel interface IP address is.

 

We have several IPSec VPN tunnels, each with their respective Tunnel Interface assigned.  Most of t

...

OMatlock by L4 Transporter
  • 9157 Views
  • 1 replies
  • 1 Likes

Security policies & Schedules.

Hello,

 

Just a quick question.  Unsure if this has been asked previously. 

 

When applying a non-reoccuring schedule to a security policy,  I have noticed in pan 8.0.x, once the schedule has expired, the policy in the security policy view does not ident

...

mtizani by L1 Bithead
  • 2409 Views
  • 3 replies
  • 0 Likes

Resolved! Maximum number of rule per vsys ?

Hi,

 

I would like to clarify the maximum number of rule/policies per vsys in PA 5220. As I noticed that 5220 supported up to 20k rulea per device.  So, is there any limit of rule per vsys?

 

https://live.paloaltonetworks.com/t5/Learning-Articles/What-is

...

Resolved! Intra-Zone Source (dynamic) NAT

Guest network (10.10.10.0/24) is in Outside zone & Internet link (11.11.11.11/24) is also in same zone.
Guests need to browse internet (say google.com)

My question is about intra-zone source NAT/PAT!

Guest, who is the source of the traffic; requires tra...

  • 23625 Posts
  • 107 Subscriptions
Labels